Connect with us

News

Are biometrics the backbone of personal security in smart cities?

Published

on

Alexander Murzina

By: Alexander Migutsky, Advanced Technologies Specialist, Positive Technologies
Alexandra Murzina, Head of Advanced Technologies Department, Positive Technologies

What makes smart cities so fascinating is the level of personalization the ecosystem promises across essential daily staples including work, transport, payments, and complete control over applications at home.

With immeasurable IoT applications and effective use of big data analytics, smart cities will emerge a phenomenon that seeks to make us question how we ever managed to operate any other way.

Achieving this level of personalization won’t be easy though. A larger interconnected network requires paths to identify users so they can tailor their experiences to themselves. Whether it be biometric ID cards or authentication portals, users should be able to authenticate themselves and connect to networks using their personal information.

Biometrics are widely used in enterprise security, access control, and banking operations, with facial recognition and fingerprint authentication systems now commonplace in companies, subways, stores, and restaurants.

The demand for biometric technologies is being driven, among other things, by the increasing adoption of biometric systems in the automotive and consumer electronics industries.

But are biometrics geared to provide comprehensive support to smart city infrastructure?

According to Fortune Business Insights, the global biometric system market size is projected to reach USD 76.70 billion by 2029.

However, there are still safety concerns about how these systems operate and make decisions; questions arise – Exactly how safe are these systems? How do they work under the hood, how do they make decisions?

Positive Technologies’ in-house team of cybersecurity experts conducted a white hat investigation focusing on physical and cyber threats to machine learning systems, including attacks that aim to compromise system confidentiality and obtain data.

The goal of the investigation was to discover gaps within biometric security systems leading up to their inevitable integration into smart infrastructure. We hope that our findings can shed some much needed light upon how the industry can collectively ensure seamless connectivity and functionality within biometric authentication systems supporting smart infrastructure.

During our investigation, we took apart two biometric devices and examined their internal electronics.

Device 1

The first device is expensive and uses advanced technology with the latest biometric algorithms. It has a depth camera, two conventional cameras, and an IR dot projector. A depth camera uses a combination of technologies to obtain depth information, increasing the reliability of the biometric system, which means attackers would need to know the user’s face geometry and have the ability to recreate it. Naturally, a device with such technology is used in access control systems at airports worldwide. Such a device is bound to be a staple of central transportation hubs in smart cities. So, how reliable is the device really?

During testing, we discovered that the device has liveness detection to identify whether the biometric source is real. The cameras capture the image, which is then received by deep neural networks for processing.

We found vulnerabilities in the system, particularly through remote code execution (RCE) attacks, which allowed us to extract machine learning models and user vectors to recreate the biometric authentication algorithm. We attempted to restore a user’s face from the representation hidden in the database.

Although we had a shot at carrying out a successful attack, there was probably a lot of optical distortion in real conditions, due to which we lost some points.

Security analysis:

  1. Developers did not use depth camera data for authentication which allowed us to circumvent the authorization algorithm.
  2. The algorithmic assessment failed when we attempted to generate an artificial face matching a real person’s biometric pattern, but attackers could potentially succeed with more time.

Device 2

The second device we studied was a biometric terminal for tracking employees’ work hours – crucial to supporting enterprise workforces within smart cities. It wasn’t as advanced as the first device as it lacked CUDA cores for complex neural networks. However, it used machine learning algorithms from the 2010s and had two cameras: one conventional and one infrared for biometric authentication.

The infrared camera is the key feature of the terminal. It captures invisible details, making it difficult to trick the system. The terminal uses a cascade classifier, 15 Gabor filters, and an algorithm for local binary patterns in the infrared range to detect and analyze facial features. Although it has some vulnerabilities, such as recognizing the same user with and without glasses as different people, the combination of technologies provides decent defense against attacks.

Security analysis: The biometric terminal is less flexible than the first device because it uses only the infrared range and classic algorithms. Nonetheless, this design makes it more resistant to attacks.

Conclusively

Having studied biometric access control terminals that use different algorithms, we discovered that the terminal with neural networks is flexible and can authenticate users wearing masks, helmets, or makeup, but it can be hacked through considerably antiquated mirroring tactics.

The terminal using classic machine learning algorithms is more resistant to illegal authentication attempts. However, both terminals are vulnerable to remote code execution attacks.

Our recommendations for developers looking to strengthen biometric device security include:

  1. Using data from the depth sensor to distinguish between individuals.
  2. Conducting independent device audits.
  3. Collaborating with security researchers and be open to receiving help.

Developing devices for smart city infrastructure is a complex process that requires experts conducting diligent trial and error routines to ensure frictionless operational capacity across the grid.

Even highly skilled teams can make mistakes, leading to vulnerabilities in the final product. Being open to feedback from real users and experts are key to optimizing biometric applications within smart infrastructure.

By eliminating passwords and PINs, biometric authentication provides a disruptive step in the field of cybersecurity and alleviates concerns around the security of copious amounts of data needed in a hyper-connected ecosystem.

While designing IoT applications for smart cities, biometrics are the ideal solution to achieving personalization and privacy backed by seamless authentication, provided the machinery involved is treated with a pristine level of care and pressure testing.

Continue Reading

News

THIRD EDITION OF BENTLEY’S EXTRAORDINARY WOMEN INITIATIVE WELCOMES STUDENTS FROM THE UK AND QATAR TO CREWE

Published

on

Extraordinary Women

The third edition of Bentley Motors’ Extraordinary Women initiative has concluded with students from universities in the UK and Qatar spending a week at the luxury car brand’s headquarters in Crewe, England. As part of a specially designed schedule, they met with Bentley experts and executives, went behind the scenes of its manufacturing operations, and tackled individual tasks.

Designed to encourage and develop the next generation of young female leaders, the 2024 edition of the Extraordinary Women programme has seen the students receive one-on-one mentorship over the past three months from a selection of inspirational Pioneers from the fields of technology, engineering, design, and business.

The students, who passed through a structured selection process focused around these four specific fields, came from a variety of participating universities: including The University of Doha for Science and Technology in Qatar, and the Universities of Bath, Loughborough, and Manchester Metropolitan in the UK.

Noora Al-Hajri, University of Doha for Science & Technology student, commented, “This experience has been nothing short of life-changing. Through the programme, I have gained invaluable knowledge and skills that will significantly impact my personal and professional growth. The opportunity to learn from inspiring mentors in both Qatar and the UK has been particularly enriching. Their guidance has broadened my horizons, challenged me to think critically, and empowered me to pursue my dreams with renewed confidence. The opportunity to visit the Bentley headquarters at the end of the programme has also been truly awe-inspiring. Thank you, Bentley, for believing in us and for creating such a transformative programme.”

The Pioneers were equally carefully selected. In the UK, entrepreneur Sara Davies MBE, founder and owner of Crafter’s Companion and TV personality from BBC One show Dragons’ Den, provided business mentorship, with Cecilia Harvey, founder of Tech Woman Today, offering the same in the field of technology.

Titi Oliyide CEng MIET, Senior Process Safety Engineer and winner of the 2023 Young Woman Engineer of the Year, mentored the engineering student, and renowned interior designer and Founder of Studioilse, Ilse Crawford provided design support.

The four Qatari Pioneers included Qatar’s UNESCO art ambassador, Muna Al-Bader, in the field of design. Dr Noora Fetais Al Marri, honoured by the Arab Women of the Year 2024 awards for her contributions to cyber security. Education and founding President of the Arab Association for Cyber Security, offered technology mentorship.

Covering the field of engineering was Dr. Hanan Farhat, founder of the Qatar Association for Women Engineers, and Dr. Buthaina Al Ansari in the field of business, who is a senior advisor at the organisation that established Tamkeen Training and Consulting Solutions.

Member of the Board for Human Resources at Bentley Motors, Dr. Karen Lange, commented, “With every year, the Extraordinary Women programme grows stronger, as exemplified by the quality of this year’s Pioneers, all who have generously given their time in the spirit of collaboration as we seek to build a legacy for young women. It has been a great honour to meet and engage with such talented young women during their visit – witnessing their energy and ability fills me with great optimism for the future.”

Launched in the UK and Middle East in 2022, the Extraordinary Women initiative has previously engaged students and Pioneers from the United Arab Emirates, Saudi Arabia, and the United Kingdom. It forms part of Bentley’s wider commitment to diversity, equity, and inclusion under its Beyond100 strategy, and was created to encourage women to explore a variety of career paths in the STEM and automotive sectors.

Continue Reading

Financial

Reem Finance signs with Network International to accelerate digital transformation

Published

on

Network International (Network) has announced the signing of a strategic partnership with Reem Finance, the leading financial services provider in the UAE. The strategic alliance aims to leverage Network’s expertise to provide a fully-fledged payment processing solution to support the digital transition.

The partnership with Network complements Reem Finance’s focus on offering customers with a unique banking experience in tune with the digital age. The scope of services includes a comprehensive range of products and services from transaction processing, card hosting and management, as well as value-added services. As the region’s largest payment solutions company, Network is committed to supporting the UAE financial services sector by providing innovative solutions to customers and enhancing the experience of consumers.

Navneet Dave, Managing Director & Co-Head of Processing – Middle East at Network International, commented, “We are thrilled to partner with Reem Finance as we jointly deliver innovative digital payment solutions that offer an effortless and secure experience for customers. Our collaboration builds on Network’s three decades of experience and expertise in creating world-class digital payments infrastructure and services for clients. It underscores Network’s commitment to empowering our partners with cutting-edge processing services and value-added solutions and driving growth in the UAE financial services industry.”

Mr. Seraj Faidi, CEO of Reem Finance,said: “As part of our ongoing commitment to enhancing the quality of our products and services for our esteemed clients, and in light of our recent collaborations with prominent service providers and partners, we are delighted to partner with Network International to explore innovative paths to accelerate digitizing our services to better serve our customers. This engagement is an important step for Reem Finance in expanding our capabilities to provide top tier, friendly and easy to use services to our customers. We are confident that with Network International, the processing of card transactions related to both consumer and commercial sectors will be state-of-the-art and seamless. We are committed to playing a vital role in elevating the financial system in the UAE, delivering value to our shareholders, and prioritizing the needs of our clients.”

Continue Reading

Financial

Wio Bank Redefines SME Banking with New Embedded Finance

Published

on

Wio Bank PJSC is introducing a new embedded finance service designed especially for the UAE’s small and medium-sized enterprises (SMEs). This initiative includes strategic partnerships with leading accounting software platforms Zoho Books, Fiskl and Wafeq, aiming to embed banking services into daily business operations and simplify financial management.

Wio Business, the bank’s first digital banking application, caters to micro, small, and medium enterprises (MSMEs), as well as freelancers and entrepreneurs. By directly integrating with accounting and financial management systems through APIs, Wio Business facilitates seamless financial workflows, enhancing management and eliminating the need for third-party intermediaries. This integration automates bookkeeping, significantly reducing manual labor and allowing businesses to concentrate on their core activities.

Jayesh Patel, Chief Executive Officer of Wio Bank PJSC, shares his vision for the new service: “By adopting Embedded Finance, we are transforming how businesses manage their finances. Our direct integration initiative simplifies how financial services are delivered and managed, making it easier and more transparent for SMEs.”

With over 94% of UAE businesses categorized as SMEs and significant contributors to employment, Wio Bank’s new service is tailored to meet a vital market need. This initiative, along with its strategic partners, is designed to simplify business operations, allowing them to thrive by focusing on growth rather than administrative financial tasks.

A New Era of Financial Management

Through Wio Business, companies can now link their accounts with selected software platforms such as Zoho Books, Fiskl, and Wafeq, offering a holistic view of their financial health. This integration eliminates the dependency on third-party intermediaries, simplifies financial workflows, ensures real-time financial insights with automatic updates, and streamlines accounting tasks with features like auto-reconciliation of bank statement. Additionally, integrating Wio Business APIs into Corporate ERPs and payment platforms facilitates automated account payables and instant transaction reconciliation, thus reducing manual labor and errors, and enhancing cost efficiency and operational gains.

Wio Bank was established to redefine banking in the UAE for both businesses and consumers. Its second digital offering, Wio Personal, is a day-to-day banking platform that changes how individuals see, manage, and grow their money. It provides users with unprecedented financial visibility and flexibility, serving as a foundation for achieving personal financial goals with an engaging experience that includes smart cards and exciting rewards.

Continue Reading

Trending

Please enable JavaScript in your browser to complete this form.

Copyright © 2023 | The Integrator